$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa File: 965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa (raw, json) Hash identifier: TIKjndvrALisSzh152Ys50PxyWwHdVU79U/Wpj6eLqI= Subject key identifier: 49:07:B6:2E:1F:FE:86:E2:52:FA:31:3C:70:93:A2:17:8D:6A:D3:45 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584E9EAFE89E72F5DCD8AD4F5BD0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22652 IP address blocks: 64.119.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e8:9e:72:f5:dc:d8:ad:4f:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=954d39b6-7957-4a8c-b3c4-dbfcfee2773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:f5:4e:98:6c:78:04:7c:df:ca:59:d9:3f: 65:d2:38:17:be:39:45:a2:7b:71:dd:10:8f:64:ea: e1:26:a9:14:d4:46:25:de:1e:79:38:81:5e:26:33: 47:23:09:53:39:4e:d2:7a:cc:bd:69:88:3f:d9:fe: bc:ec:d1:c5:1c:ba:8d:b2:0f:bb:28:aa:77:2e:9b: a2:80:45:ac:f5:96:55:c7:c1:a6:49:60:cc:9e:db: de:03:c7:5b:bd:41:52:09:a8:3c:5a:2d:6d:e2:79: 35:1c:cd:cc:d5:26:d6:8a:b0:40:6f:75:b5:53:09: 13:3d:9b:9b:e2:89:81:85:70:1c:e3:c4:67:20:3c: 28:9c:c7:bf:3c:38:68:d2:61:dd:82:0f:2a:34:28: e8:97:1e:a1:32:a4:88:b1:47:a2:e9:5b:65:a9:38: af:ca:75:99:6d:b0:f1:49:8b:51:6c:09:bd:4f:ea: 46:34:80:ed:c0:fa:83:ee:e2:f0:32:be:0c:40:c1: bf:02:57:08:9c:3d:5c:f4:5b:10:f6:26:18:40:1f: 60:d7:c2:fc:d2:c5:a6:b3:45:00:e2:9c:88:b0:58: 9d:b2:40:54:c3:f3:81:3c:60:78:2e:48:04:18:b6: 56:00:d0:81:37:35:55:f0:5c:17:96:f2:3a:85:88: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:07:B6:2E:1F:FE:86:E2:52:FA:31:3C:70:93:A2:17:8D:6A:D3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 64.119.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4c:ec:84:3c:11:bf:92:2d:8a:de:8d:7b:fb:e6:0c:8b:e5: e6:93:35:28:bc:ab:68:44:22:fc:26:c9:4b:b2:31:b9:e6:67: 5f:82:0c:af:97:68:2a:a3:dd:89:67:73:40:6f:b4:33:30:34: 8c:db:f9:b3:b3:11:e6:74:1f:55:72:62:1e:b8:80:a1:18:89: 20:dc:e0:4d:7f:ff:70:eb:f5:de:1e:43:fd:f8:47:40:d9:d3: 80:78:a5:18:53:dd:1a:9d:79:e5:f4:e3:f5:66:9f:95:3a:e1: f5:8b:fe:54:da:d4:df:97:7a:6b:00:09:0c:bb:6c:1e:5e:f2: 5a:fb:83:8f:a8:9a:e3:7d:a6:37:53:88:e5:47:b1:fc:1b:a7: 1c:ec:36:a2:70:4b:79:c6:33:e9:b2:0a:09:23:58:b5:8d:81: f1:5c:02:9a:89:59:37:2e:9c:eb:69:58:6f:05:5e:32:ff:d5: 61:2b:41:db:9c:9d:ac:c8:cb:dc:70:78:f9:23:d7:8f:a7:d3: 82:57:97:e8:45:1d:5a:a9:7c:b7:f2:42:ee:8c:40:f3:a8:12: 2c:f2:40:3e:f0:e6:4f:56:17:ed:dc:59:56:e5:bb:22:47:0b: 7e:8f:9c:80:63:ef:2f:0a:56:44:f9:12:11:0a:fb:79:41:32: 40:48:70:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+iecvXc2K1PW9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk OTU0ZDM5YjYtNzk1Ny00YThjLWIzYzQtZGJmY2ZlZTI3NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Br1TphseAR838pZ2T9l0jgXvjlFontx3RCP ZOrhJqkU1EYl3h55OIFeJjNHIwlTOU7Sesy9aYg/2f687NHFHLqNsg+7KKp3Lpui gEWs9ZZVx8GmSWDMntveA8dbvUFSCag8Wi1t4nk1HM3M1SbWirBAb3W1UwkTPZub 4omBhXAc48RnIDwonMe/PDho0mHdgg8qNCjolx6hMqSIsUei6VtlqTivynWZbbDx SYtRbAm9T+pGNIDtwPqD7uLwMr4MQMG/AlcInD1c9FsQ9iYYQB9g18L80sWms0UA 4pyIsFidskBUw/OBPGB4LkgEGLZWANCBNzVV8FwXlvI6hYjRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkHti4f/obiUvoxPHCToheNatNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOTY1YTA3NjgtOGY2NC0z YjY2LWFkMmItZjJhNWFlYmI2YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdM7IQ8Eb+SLYrejXv75gyL5eaTNSi8q2hEIvwmyUuyMbnmZ1+CDK+X aCqj3Ylnc0BvtDMwNIzb+bOzEeZ0H1VyYh64gKEYiSDc4E1//3Dr9d4eQ/34R0DZ 04B4pRhT3RqdeeX04/Vmn5U64fWL/lTa1N+XemsACQy7bB5e8lr7g4+omuN9pjdT iOVHsfwbpxzsNqJwS3nGM+myCgkjWLWNgfFcApqJWTcunOtpWG8FXjL/1WErQduc nazIy9xwePkj14+n04JXl+hFHVqpfLfyQu6MQPOoEizyQD7w5k9WF+3cWVbluyJH C36PnIBj7y8KVkT5EhEK+3lBMkBIcM4= -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:37 2026 by rpki-client